My name is Krushna,l am a Samsung smartphone user, and l would like to report a potential security vulnerability have discovered in the in display fingerprint scanner system on my device.
Here are the key points of the issue:
1. Bypassing Fingerprint Limit: Although the system officialy allows registering only 3 fingerprints, I was able to register up to 10 different fingerprints in each individual slot by changing fingers during the scanning process. This resulted in 30 different fingerprints being able to unlock the device.And maybe I can register 20 fingerprint in each individual slot.
2. Non Biometric Object Unlock: I was also able to register metallic objects such as a screw, coin or a small circular object as a fingerprint. Once registered, these objects successfully unlock the device just like a human finger, indicating a failure in proper biometric valid
I believe this behavior presents a serious security and privacy concern, as it undermines the integrity of biometric authentication.
I would be happy to:
•Share video demonstrations or technical details of how this issue can be reproduced.
•Submit this report through Samsung's official bug bounty platform
Please let me know the preferred way to proceed or if this issue should be escalated to your security vulnerability team
I have sent mail on security@samsung.com
Thank you for your time and consideration. I look forward to your response
We appreciate you taking the time to share your suggestions and appreciate the time and effort you have spent sharing your valuable feedback. We are continuously working to make our products better and more efficient.
